INFORMATION ON THE PROCESSING OF PERSONAL DATAof users who visit the website http://www.lorett.compursuant to Article 13 of Regulation (EU) 2016/679 - GDPR

1 IntroductionAt Breda Lorett s.r.l. we value the protection of privacy. This Policy describes how to manage the personal data of customers, collected - independently or through third parties - through this website or other channels. The purpose of this policy is to ensure maximum transparency regarding the processing of these data.

2 General principles and commitment to privacy protectionBreda Lorett s.r.l. is committed to protecting the right to privacy of its customers. Our goal is to protect all personal data we hold in order to manage personal data responsibly and transparently. We have therefore committed ourselves to the following general principles:• all data are processed in a lawful, correct and transparent manner vis-à-vis the data subject, in compliance with the general principles set out in the GDPR and the Privacy Code;• we collect and process data only for the purposes indicated in this Policy or for the specific purposes already shared with you and/or for which you have given your consent;• we aim to collect, process and use as little personal data as possible;• when we collect your personal information, we make sure it is as accurate and up-to-date as possible;• if the personal data we collect is no longer necessary for any purpose and we are not required to retain it by law, we will do everything possible to delete, destroy or anonymise it;• specific security measures are applied to prevent data loss, illicit or incorrect use and unauthorised access;• your personal data will not be shared, sold, made available or disclosed to parties other than those indicated in the Policy.

3 Data collected from the website and purposes3.1 Browsing dataDuring their normal operation, the computer systems and software procedures used to operate this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses of the requested resources in URI/URL (Uniform Resource Identifier/Locator) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment.These data, necessary for the use of web services, are also processed to:• obtain statistical information on the use of the services (most visited pages, number of visitors per time or day slot, geographical areas of origin, etc.);• check the correct functioning of offered services.The browsing data do not persist for a time exceeding operation needs and are deleted immediately after their aggregation (except for any need to ascertain crimes by judicial authorities).3.2 CookiesIn order to make its services as efficient and simple as possible to use, this Website makes use of cookies. Therefore, when you visit the Website, a minimum amount of information is entered into your device, such as small text files called "cookies", which are saved in the directory of your web browser. There are different types of cookies, but the main purpose of a cookie is to make the Website work more effectively and to enable certain features.Cookies are used to improve your overall navigation. In particular, they:

• let you navigate efficiently from one page of the Website to another.• save the username and preferences you have entered.• allow you to avoid entering the same information (such as username and password) several times during your visit.• measure the use of services by Users, to optimize the browsing experience and services.• present advertising information targeted according to the interests and behaviour shown by the User during navigation.

There are various types of cookies. Below are the types of cookies that may be used on the Website with a description of the purpose related to the use.Technical cookiesCookies of this type are necessary for the proper functioning of certain areas of the website. Cookies in this category include both persistent and session cookies. Without these cookies, the website or parts of it may not function properly. Therefore, they are always used, regardless of user preferences. Cookies in this category are always sent from our domain.Analytical cookiesThese cookies are used to collect information about your use of the website. The Data Controller uses this information for statistical analysis, to improve the website and simplify its use, as well as to monitor its proper functioning. This type of cookie collects anonymous information about your activity on the Website and how you arrived at the Website and the pages you visit. Cookies in this category are sent from the Website or from third-party domains.Third-party detection cookiesThese cookies are used to collect information about how visitors use the Website, the keywords used to reach the Website, the visited Websites and the origins of the traffic from which visitors come for marketing campaigns. The owner may use this information to compile reports and improve the Website. Cookies collect information anonymously. This type of cookie is sent from the Website or from third-party domains.Cookies for integrating third-party functionsThese cookies are used to integrate third-party functions into the Website (for example, comment forms or social networking icons that allow visitors to share website content). Cookies in this category may be sent from the domains of partner websites or websites that otherwise offer the functions of the website.The Data Controller is not required to request the user's consent for technical cookies, as these are strictly necessary for the provision of the service.For other types of cookies, consent may be expressed by the User, in accordance with current legislation, through specific configurations of the browser and computer programmes or devices that are easy and clear for the User to use. The Data Controller hereby reminds you that it is possible to modify the preferences related to cookies at any time. You can also disable cookies from your browser at any time, but this may prevent you from using certain parts of the Website.Third-party websitesThe website contains links to other websites that have their own privacy policies. These privacy policies may differ from that adopted by the Data Controller, who is therefore not responsible for third-party websites.Pursuant to article 122(2) of Italian Legislative Decree no. 196/2003, consent to the use of such cookies is expressed by the data subject through the individual setting that he or she has freely chosen for the browser used to navigate the website, without prejudice to the user's right to communicate at any time to the Data Controller his or her will regarding data managed through cookies that the browser itself has accepted.Enabling/disabling cookies via the browserThere are several ways to manage cookies and other tracking technologies. By changing your browser settings, you can accept or reject cookies or decide to receive an alert before accepting a cookie from the websites you visit. Please note that if you completely disable cookies in your browser you may not be able to use all of our interactive features.If you use multiple computers at different locations, make sure each browser is set to suit your preferences.You can delete all cookies installed in the cookie folder of your browser. Each browser has different procedures for managing settings. Click on one of the links below for specific instructions.Microsoft Windows ExplorerGoogle ChromeMozilla FirefoxApple SafariIf you do not use any of the browsers listed above, select "cookies" in the relevant section of the guide to find out where your cookie folder is located.Enabling and disabling cookiesIn addition to being able to use the tools provided by the browser to enable or disable individual cookies, we inform you that the website www.youronlinechoices.com contains a list of the main providers who work with the operators of websites to collect and use information useful for behavioural advertising.You can enable or disable all companies or alternatively adjust preferences individually for each company.To do so, you can use the tool found on the page www.youronlinechoices.com/it/le-tue-scelte.More useful information about cookies can be found at these addresses:www.allaboutcookies.orgwww.youronlinechoices.com3.3 Data collected by the website with the user's consentWe may collect directly from users of the website, through the use of special forms, some personal data that are provided voluntarily by expressly accepting the privacy policy:a) The Contact Form allows us to collect personal contact information (name, e-mail) to respond to requests.b) The News -> Newsletter Form allows you to subscribe to the newsletter that suggests news, initiatives and events of the company to subscribers. This form requests your e-mail; registration is subject to acceptance of specific, free and informed consent. The data are kept until the possible revocation of the subscription to the newsletter service, freely available at any time through the link contained at the bottom of each message sent. This data may be used to send the user communications, including of a commercial nature, relating to the services and products of the Company.The data are kept for a time compatible with the purpose of collection.

4 Legal basis of processingThe purpose of processing personal data provided by customers is to provide the requested products and services and is, therefore, necessary for the fulfilment of legal and contractual obligations; therefore, any refusal to provide them in whole or in part may make it impossible to provide the requested services.The company may also process the data indicated above for direct marketing purposes addressed to its customers, who are ensured the right to object to such processing at any time and free of charge. In case of objection, the customer's personal data will no longer be processed for these purposes. The legal basis of processing is the legitimate interest of the Data Controller to carry out direct marketing initiatives vis-à-vis its customers, in view of the relationship established with them and the protection of their rights and fundamental freedoms guaranteed through the right to object mentioned above.Only if the customer expressly consents, the said data indicated above may be processed for purposes of information or commercial promotion of products by the Company and/or other entities such as companies belonging to the same Group, to which personal data may be communicated for processing, in accordance with applicable rules, as indicated also in the statement of specific consent that the customer concerned may freely give.

5 Rights of the data subjectThe Customer holds a series of rights that he or she can exercise at any time in the manner and within the limits provided by current legislation:• request confirmation of the existence of personal data concerning him or her (right of access);• know its origin;• receive an intelligible communication;• have information about the logic, methods and purposes of processing;• request the update, rectification, integration, erasure, transformation into anonymous form, or blocking of data processed in violation of the law, including those no longer necessary to achieve the purposes for which they were collected;• in cases of consent-based processing, receive their data provided to the data controller, in a structured and readable form for a data processor and in a format commonly used by an electronic device;• lodge a complaint with the Supervisory Authority.You can exercise your rights by writing an email to lorett@lorett.com. The request will be taken into consideration within the terms provided for by regulations.

6 Transfer of personal data outside the EUThe management and retention of Personal Data will take place on servers located within the European Union of the Data Controller and/or duly appointed third-party companies. The data will not be transferred outside the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to non-EU countries. In this case, the Data Controller hereby ensures that the data will be transferred in accordance with the applicable legal provisions and, if necessary, by means of agreements guaranteeing an adequate level of protection.

7 Data controller and contactsThe Data Controller is Breda Lorett s.r.l. with registered office in Via Signagatta, 39/41/43 10044 Pianezza (TO) - Italy (VAT no. 11630780010), in the person of its legal representative, who can be contacted at: +390119682455, email lorett@lorett.com, which you can contact for any question, comment on this Privacy Policy or the processing of your personal data, and to exercise all rights under the GDPR and the Privacy Code.

8. Policy UpdateThis Policy was last updated on 25 May 2018, and may be subject to periodic review, also in relation to the reference legislation and jurisprudence. In case of significant changes, these will be duly highlighted on the homepage of the website for a reasonable time. However, data subject is advised to consult this policy periodically.